MULTIPLEX SYSTEM
At least one of components of a multiplex system can detect a failure by itself. An output of the multiplex system is determined from outputs of the components and a failure detection notification. Thus, a multiplex system having higher reliability is provided. A multiplex system 1 includes a plurality of components including a component A1 (10a), a component B1 (10b), and a component C1 (10c) that cannot detect a failure by itself and a component A2 (20a) and a component B2 (20b) that can detect a failure by itself. Outputs 11a, 11b, 11c, 21a, and 21b of the components and failure detection notifications 22a and 22b are inputted to an output determination part 30. The output determination part 30 determines an output of the multiplex system 1 from the outputs of the components and the failure detection notifications.
Latest NEC Corporation Patents:
- STRUCTURE OF ELECTRONIC APPARATUS AND METHOD FOR ASSEMBLING ELECTRONIC APPARATUS
- DUAL CONNECTIVITY COMMUNICATION TERMINAL, BASE STATION, AND COMMUNICATION METHOD
- INFORMATION EXCHANGE APPARATUS, INFORMATION EXCHANGE SYSTEM AND INFORMATION EXCHANGE METHOD
- METHOD, DEVICE AND COMPUTER STORAGE MEDIUM FOR COMMUNICATION
- SERVER APPARATUS, CONTROL METHOD AND NON-TRANSITORY COMPUTER-READABLE MEDIUM
The present invention relates to a multiplex system including a plurality of components having the same function, and more particularly to a multiplex system in which at least one of a plurality of components is capable of failure detection.
BACKGROUND ARTVarious mechanical systems, electrical systems, and computing systems have been used in infrastructures such as factories, plants, or network systems. As failure of those systems is fatal, high reliability has been required for those systems.
One of methods of enhancing the reliability of a system includes using a multiplex system in which a plurality of components having the same function are prepared and operated in parallel.
For example,
Another example of multiplex systems is a multiplex calculation system disclosed in JP-A 2009-276983 (Patent Literature 2). Outputs of multiplexed processors are inputted to a majority decision circuit, which determines an output of the multiplexed processors. FIG. 5 of Patent Literature 2 discloses a multiplex calculation system having three processors operable in parallel. Whether data and addresses of the respective lines are correct is detected by a data majority decision circuit and an address majority decision circuit. Two coincident outputs are regarded as being correct, and the operation continues with those coincident outputs. When a failure diagnosis circuit detects a failure from the correctness of the data and the addresses of the respective lines, then the operation of the failed line is stopped. The system can continue to operate even if one of the lines fails.
SUMMARY OF THE INVENTION Problem(s) to be Solved by the InventionPatent Literature 2 is silent on an output of the multiplex calculation system in a case where the correctness cannot be decided by majority.
With the duplex system illustrated in
Furthermore, as shown in
In the system of Patent Literature 2, the multiplicity is set to be not less than three. Even if more failures occur, it is possible to determine and output a correct value by means of majority decision. Therefore, the system of Patent Literature 2 can provide higher reliability. However, more components are generally needed to increase the multiplicity, causing an increase of cost.
The present invention has been made in view of the above circumstances. The present invention provides a multiplex system that can achieve high reliability without an increase of cost.
Means to Solve the Problem(s)According to an aspect of the present invention, there is provided a multiplex system including a plurality of components having the same function. At least one of the components can detect a failure by itself. The multiplex system comprises an output determination part operable to determine an output of the system from outputs of the components and a failure detection notification from the component that can detect a failure by itself.
Advantageous Effect of the InventionAccording to an aspect of the present invention, since at least one of components in a multiplex system is formed of a component that can detect a failure by itself, failure detection can be performed solely by the components. Therefore, higher reliability can be achieved.
Furthermore, this failure detection does not increase the number of components. Therefore, high reliability can be achieved without an increase of the cost.
In an embodiment, a multiplex system includes a plurality of components having the same function and an output determination part operable to determine an output of the multiplex system from outputs of the plurality of components. At least one of the components can detect a failure by itself. The determination part determines the output of the multiplex system from the outputs of the components and a failure detection notification from the component that can detect a failure by itself.
In an embodiment, if the components that can detect a failure by itself include one or more components that do not output a failure detection notification, the output determination part determines to use, as the output of the multiplex system, one of the outputs of the components that do not output a failure detection notification.
In an embodiment, if all of the components that can detect a failure by itself output a failure detection notification and there are one or more components other than the components that can detect a failure by itself, then the output determination part determines to use, as the output of the multiplex system, one of the outputs of the components other than the components that can detect a failure by itself.
In an embodiment, if all of the components that can detect a failure by itself output a failure detection notification and there are no components other than the components that can detect a failure by itself, then the output determination part does not change an output value of the multiplex system.
In an embodiment, if all of the components that can detect a failure by itself output a failure detection notification and there are no components other than the components that can detect a failure by itself then the output determination part uses a preset value as the output of the multiplex system.
In an embodiment, if all of the components that can detect a failure by itself output a failure detection notification, and there are two or more components other than the components that can detect a failure by itself, and a majority of the components other than the components that can detect a failure by itself have the same output, then the output determination part uses, as the output of the multiplex system, the output of the majority of the components.
In an embodiment, if all of the components that can detect a failure by itself output a failure detection notification, and there are two or more components other than the components that can detect a failure by itself, and a majority of the components other than the components that can detect a failure by itself do not have the same output, or there are no two or more components other than the components that can detect a failure by itself, then the output determination part does not change an output value of the multiplex system.
In an embodiment, if all of the components that can detect a failure by itself output a failure detection notification, and there are two or more components other than the components that can detect a failure by itself, and a majority of the components other than the components that can detect a failure by itself do not have the same output, or there are no two or more components other than the components that can detect a failure by itself, then the output determination part uses a preset value as the output of the multiplex system.
In another embodiment, there is provided a method of determining an output of a multiplex system including a plurality of components. The multiplex system includes at least one first component that can detect a failure by itself and at least one second component that cannot detect a failure by itself but has the same function as the first component. The output determining method comprises determining an output of the multiplex system from outputs of the first component and the second component and a failure detection notification of the first component.
If the first component includes one or more components that do not output a failure detection notification, one of the outputs of the components that do not output the failure detection notification is used as an output of the multiplex system.
Next, exemplary embodiments of the present invention will be described with reference to the drawings.
Referring to
Detection of a failure is performed by detection of an abnormal value with a sensor in a mechanical system or an electrical system, or by encoding represented by parity or checking with arithmetical operations of a remainder in a computing system. With those failure detection methods, generally, cost for area, electric power, and weight is lower as compared to a case where the same components are used and compared with each other.
Referring to
As shown in
As shown in
In the second exemplary embodiment, whether to use an output of a component that cannot detect a failure by itself (the component A in
Referring to
If two failures occur so as to cause the same error in the conventional triplex system, an error may be outputted by majority decision. In contrast, even if two failures occur in the triplex system of the third exemplary embodiment, the triplex system can output a correct value X as shown in
Referring to
If two failures occur so as to cause the same error in the conventional triplex system, an error may be outputted by majority decision. In contrast, even if two failures occur in the triplex system of the fourth exemplary embodiment, the triplex system can output a correct value X as shown in
If higher reliability is required on the assumption that three or more failures occur concurrently, the output determination part may operates as follows: When failures occur in the component B and the component C as shown in
Although the present invention has been described along with the above exemplary embodiments, the present invention is not limited to the configurations of the aforementioned embodiments. As a matter of course, a variety of variations and modifications that would be apparent to those skilled in the art are included in the scope of the present invention.
Some or all of the above exemplary embodiments can be described as in the following notes. Nevertheless, the present invention is not limited to those notes.
(Note 1) A multiplex system including a plurality of components having the same function, wherein at least one of the components can detect a failure by itself, and the multiplex system comprises an output determination part operable to determine an output of the multiplex system from outputs of the components and a failure detection notification from the component that can detect a failure by itself.
(Note 2) The multiplex system as recited in Note 1, wherein, if the components that can detect a failure by itself include one or more components that do not output a failure detection notification, the output determination part determines to use, as the output of the multiplex system, one of the outputs of the components that do not output a failure detection notification.
(Note 3) The multiplex system as recited in Note 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification and there are one or more components other than the components that can detect a failure by itself, then the output determination part determines to use, as the output of the multiplex system, one of the outputs of the components other than the components that can detect a failure by itself.
(Note 4) The multiplex system as recited in Note 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification and there are no components other than the components that can detect a failure by itself, then the output determination part does not change an output value of the multiplex system.
(Note 5) The multiplex system as recited in Note 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification and there are no components other than the components that can detect a failure by itself, then the output determination part uses a preset value as the output of the multiplex system.
(Note 6) The multiplex system as recited in Note 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification, and there are two or more components other than the components that can detect a failure by itself, and a majority of the components other than the components that can detect a failure by itself have the same output, then the output determination part uses, as the output of the multiplex system, the output of the majority of the components.
(Note 7) The multiplex system as recited in Note 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification, and there are two or more components other than the components that can detect a failure by itself, and a majority of the components other than the components that can detect a failure by itself do not have the same output, or there are no two or more components other than the components that can detect a failure by itself, then the output determination part does not change an output value of the multiplex system.
(Note 8) The multiplex system as recited in Note 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification, and there are two or more components other than the components that can detect a failure by itself, and a majority of the components other than the components that can detect a failure by itself do not have the same output, or there are no two or more components other than the components that can detect a failure by itself, then the output determination part uses a preset value as the output of the multiplex system.
(Note 9) A method of determining an output of a multiplex system including a plurality of components, wherein the multiplex system includes a first component that can detect a failure by itself and a second component that cannot detect a failure by itself but has the same function as the first component, and the method comprises determining an output of the multiplex system from outputs of the first component and the second component and a failure detection notification of the first component.
(Note 10) The method of determining an output of a multiplex system as recited in Note 9, wherein, if the first component includes one or more components that do not output a failure detection notification, one of the outputs of the components that do not output the failure detection notification is used as an output of the multiplex system.
(Note 11) A multiplex system including a plurality of components having the same function, wherein the multiplex system includes a first component that can detect a failure by itself and a second component that cannot detect a failure by itself but has the same function as the first component, and also includes an output determination part operable to determine an output of the multiplex system from outputs of the first component and the second component and a failure detection notification of the first component.
This application claims the benefit of priority from Japanese patent application No. 2010-027538, filed on Feb. 10, 2010, the disclosure of which is incorporated herein in its entirety by reference.
Claims
1. A multiplex system comprising:
- a plurality of components having the same function, wherein at least one of the plurality of components can detect a failure by itself; and
- an output determination part operable to determine an output of the multiplex system from outputs of the plurality of components and a failure detection notification from the component that can detect a failure by itself.
2. The multiplex system as recited in claim 1, wherein, if the components that can detect a failure by itself comprise one or more components that do not output a failure detection notification, the output determination part determines to use, as the output of the multiplex system, one of the outputs of the components that do not output a failure detection notification.
3. The multiplex system as recited in claim 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification and there are one or more components other than the components that can detect a failure by itself, then the output determination part determines to use, as the output of the multiplex system, one of the outputs of the components other than the components that can detect a failure by itself.
4. The multiplex system as recited in claim 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification and there are no components other than the components that can detect a failure by itself, then the output determination part does not change an output value of the multiplex system.
5. The multiplex system as recited in claim 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification and there are no components other than the components that can detect a failure by itself, then the output determination part uses a preset value as the output of the multiplex system.
6. The multiplex system as recited in claim 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification, and there are two or more components other than the components that can detect a failure by itself, and a majority of the components other than the components that can detect a failure by itself have the same output, then the output determination part uses, as the output of the multiplex system, the output of the majority of the components.
7. The multiplex system as recited in claim 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification, and there are two or more components other than the components that can detect a failure by itself, and a majority of the components other than the components that can detect a failure by itself do not have the same output, or there are no two or more components other than the components that can detect a failure by itself, then the output determination part does not change an output value of the multiplex system.
8. The multiplex system as recited in claim 1, wherein, if all of the components that can detect a failure by itself output a failure detection notification, and there are two or more components other than the components that can detect a failure by itself, and a majority of the components other than the components that can detect a failure by itself do not have the same output, or there are no two or more components other than the components that can detect a failure by itself, then the output determination part uses a preset value as the output of the multiplex system.
9. A method of determining an output of a multiplex system comprising a plurality of components, wherein the multiplex system comprises at least one first component that can detect a failure by itself and at least one second component that cannot detect a failure by itself but has the same function as the first component, the method comprising: determining an output of the multiplex system from outputs of the first component and the second component and a failure detection notification of the first component.
10. The method of determining an output of a multiplex system as recited in claim 9, wherein, if the first component comprises one or more components that do not output a failure detection notification, one of the outputs of the components that do not output the failure detection notification is used as an output of the multiplex system.
Type: Application
Filed: Dec 21, 2010
Publication Date: Dec 6, 2012
Applicant: NEC Corporation (Tokyo)
Inventors: Yoshio Kameda (Tokyo), Hideaki Saito (Tokyo)
Application Number: 13/577,412